Behavioral task
behavioral1
Sample
9f40a734698d2b2fc0d47f1ffbf62073338a3e20e2d00a02ce6e2157ee51e620.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f40a734698d2b2fc0d47f1ffbf62073338a3e20e2d00a02ce6e2157ee51e620.exe
Resource
win10v2004-20221111-en
General
-
Target
9f40a734698d2b2fc0d47f1ffbf62073338a3e20e2d00a02ce6e2157ee51e620
-
Size
277KB
-
MD5
c2c3e87205e92020c8c0a017ad0a1b07
-
SHA1
27added09e8009aa75adc6c4786f395692fc02b8
-
SHA256
9f40a734698d2b2fc0d47f1ffbf62073338a3e20e2d00a02ce6e2157ee51e620
-
SHA512
3e7d65df659908ca34c99899eaf9512c3fd29ad448f34792683f1f05532054775736792b4bd3c136e4fd5fc054a7961287f4dbb08ff5fb043dc6985673c647b9
-
SSDEEP
1536:x3ttKeA0mj6K7tbg1yIxFeB6U4NgJud+Ul2KZz+YYXcfoY3KEIb5GVyWQVpsC7:xzopM8ZBySJY+Hq+YYXuo2K+iPn
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9f40a734698d2b2fc0d47f1ffbf62073338a3e20e2d00a02ce6e2157ee51e620.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE